Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter.
References
Link | Resource |
---|---|
http://ocportal.com/site/news/view/ocportal-security-update.htm | Patch Vendor Advisory |
http://ocportal.com/site/news/view/new-releases/ocportal-7-1-6-released.htm | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-10-01 16:55
Updated : 2012-10-01 21:00
NVD link : CVE-2012-5234
Mitre link : CVE-2012-5234
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
ocportal
- ocportal